$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: RcQLLH1W3uFJFiXyPkjq0L/vWXngnSFhKP8zBiP3u4E= Subject key identifier: 07:C6:07:8F:C2:0C:DA:C4:96:7C:2E:6A:46:B1:14:2A:8D:43:9E:1C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E1D5F499C5290729BC35EFB6911B4EFC6AE55A6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Tue 21 Jul 2026 00:01:16 +0000 ROA not before: Tue 21 Jul 2026 00:01:16 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1d:5f:49:9c:52:90:72:9b:c3:5e:fb:69:11:b4:ef:c6:ae:55:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:01:16 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=28847823b8a1c9778ca61c69cc36e875537133cc74e9124eeca8a4a748b0d770, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:4a:a8:dd:af:05:30:45:04:76:8e:47:94: 77:cd:cc:d3:0b:bc:2b:8b:9c:ab:09:df:de:2a:7e: ec:c9:4d:8d:3b:f7:8f:83:48:7b:88:40:6f:f0:0a: 39:f4:50:1c:5c:1f:0d:38:96:10:5b:34:21:99:af: 75:54:5d:3c:04:e5:7a:56:89:fb:3c:f1:2f:39:ca: 3a:92:a9:cc:f2:7f:49:e4:d6:a6:e1:14:ce:0d:50: d7:16:26:f5:90:83:2f:ab:0e:f4:2f:6a:93:24:73: 4d:29:96:28:54:c1:36:8a:f3:8b:9c:b1:b3:21:b9: 19:f8:fc:24:78:bc:f7:1c:78:34:28:a2:c6:97:8f: 6f:f5:fb:ff:f9:19:4e:14:3b:8d:98:c5:0d:5e:cd: 54:28:bd:e8:72:6b:04:05:b9:e0:3b:cf:3f:e3:09: c1:a8:cf:28:05:74:bc:51:20:4a:fe:ae:5d:25:84: 66:21:e9:c6:b0:06:a4:58:03:5d:44:1e:99:a7:27: 23:06:0d:6c:9e:29:0b:6b:97:a9:bc:20:13:9f:df: 98:a1:e2:16:51:86:ba:c2:93:d7:c9:2d:11:7a:5d: e6:f8:98:e6:48:79:9b:e7:3b:e4:92:a0:15:e6:09: b7:2b:3f:c1:5d:32:78:f1:19:3f:60:be:87:98:28: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C6:07:8F:C2:0C:DA:C4:96:7C:2E:6A:46:B1:14:2A:8D:43:9E:1C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 47:be:d5:15:cb:95:f9:22:06:a5:a1:f5:77:ba:a6:8d:76:f3: bc:cd:6d:8b:9b:fe:bb:16:29:af:1b:2e:e2:14:24:ab:78:32: 68:c5:dd:a1:03:51:98:51:c2:f6:df:38:6e:6f:2c:94:88:1a: 7b:c7:f4:b3:63:88:59:76:7e:4e:ca:4a:52:32:7d:c0:0c:cb: 61:b4:6d:dc:82:25:3e:1b:db:7b:f4:52:fb:ca:92:34:56:2d: 82:e6:c8:e0:88:2b:32:15:62:f8:f2:36:c3:ad:d5:e8:27:8e: 29:bb:9c:22:5a:95:16:0c:60:77:e4:7d:0a:3f:80:23:f9:0f: f0:09:83:72:55:01:16:fb:35:50:8d:c1:04:dd:7e:a4:67:2d: 4f:41:cd:7b:a7:bb:c1:5d:49:40:c7:4b:37:4d:ec:46:43:ca: dc:40:21:c8:3f:9f:9f:bb:a6:19:4d:03:2b:95:ad:19:cd:db: 0f:a1:8b:90:1b:63:08:1f:18:51:f8:c2:7d:39:53:39:b8:6e: f6:b4:57:bc:9e:68:73:5a:32:82:2d:fb:32:69:e7:c9:19:66: ce:74:44:45:df:69:d3:10:ac:91:33:f7:56:7f:3b:a4:16:f8: 96:5b:6e:ec:29:bc:3a:52:5c:4f:89:fc:73:e1:0b:69:aa:3f: 6d:74:5d:d8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDh1fSZxSkHKbw177aRG078auVaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDExNloX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMjg4NDc4MjNiOGExYzk3NzhjYTYx YzY5Y2MzNmU4NzU1MzcxMzNjYzc0ZTkxMjRlZWNhOGE0YTc0OGIwZDc3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRKqN2vBTBFBHaOR5R3zczTC7wr i5yrCd/eKn7syU2NO/ePg0h7iEBv8Ao59FAcXB8NOJYQWzQhma91VF08BOV6Von7 PPEvOco6kqnM8n9J5Nam4RTODVDXFib1kIMvqw70L2qTJHNNKZYoVME2ivOLnLGz IbkZ+PwkeLz3HHg0KKLGl49v9fv/+RlOFDuNmMUNXs1UKL3ocmsEBbngO88/4wnB qM8oBXS8USBK/q5dJYRmIenGsAakWANdRB6ZpycjBg1snikLa5epvCATn9+YoeIW UYa6wpPXyS0Rel3m+JjmSHmb5zvkkqAV5gm3Kz/BXTJ48Rk/YL6HmCgyJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAfGB4/CDNrElnwuakaxFCqNQ54cMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBAEe+1RXLlfkiBqWh9Xe6 po1287zNbYub/rsWKa8bLuIUJKt4MmjF3aEDUZhRwvbfOG5vLJSIGnvH9LNjiFl2 fk7KSlIyfcAMy2G0bdyCJT4b23v0UvvKkjRWLYLmyOCIKzIVYvjyNsOt1egnjim7 nCJalRYMYHfkfQo/gCP5D/AJg3JVARb7NVCNwQTdfqRnLU9BzXunu8FdSUDHSzdN 7EZDytxAIcg/n5+7phlNAyuVrRnN2w+hi5AbYwgfGFH4wn05Uzm4bva0V7yeaHNa MoIt+zJp58kZZs50REXfadMQrJEz91Z/O6QW+JZbbuwpvDpSXE+J/HPhC2mqP210 Xdg= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:23 2026 by rpki-client